Sync task on ArgoCD fails with "Failed to load live state: applications.argoproj.io "example.ews-api-hf" is forbidden"

Products

• VMware vSphere Kubernetes Service

Issue/Introduction

• Application sync on ArgoCD UI displays the error below.
  
  "Failed to load live state: applications.argoproj.io "example.ews-api-hf" is forbidden: User 'system:serviceaccount:svc-argocd-service-domain-c10:argocd-application-controller" cannot get resource "applications" in API group "argoproj.io" in the namespace "argocd"
  
  
• Both the ArgoCD service pod and ArgoCD instance pods are deployed inside the default "svc-argocd-service-domain" namespace.

Environment

VMware vSphere Kubernetes Service
ArgoCD Service version 1.0.0
ArgoCD Service version 1.0.1

Cause

The ArgoCD instance is supposed to be deployed in a manually created namespace and not the default "svc-argocd-service-domain" namespace.

Resolution

Install ArgoCD instance in the manually created vSphere Namespace as mentioned in the document URL- Install the VMware Argo CD Operator and an Argo CD Instance on a vSphere Namespace

Additional Information

All the example ArgoCD instance manifests can be found here- vSphere Supervisor Services and Standalone Components